340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece

Sharing

Copy URL Twitter E-mail

General

Target
340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece
Size 839KB
Sample241107-1f2vlaygnf
SHA256 340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece
MD5 658c41e67054ee3f407f3f78522ab4f3
SHA1 a650a24f3a6f729843398dbe803aff3985b25f78
SHA512 642b442776fd831338994aed2193d8cec9bcafd75510cf22152e27c4cf06a4f924cbb4d43ba84e4fcb36cc633352905b86df577fa22231366213aa04c039f3f8
SSDEEP 24576:kpiq5XrhXf2V+siXvFbKsFiLrn0RDw6jn:kYqXEAvwsFiLb+jn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece

File Explorer

340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece

.exe 839KB

340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece

IMPHASH 5f5440fa00731e6eb5f150cd8492e6e4
SHA256 340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece
MD5 658c41e67054ee3f407f3f78522ab4f3
SHA1 a650a24f3a6f729843398dbe803aff3985b25f78
SHA512 642b442776fd831338994aed2193d8cec9bcafd75510cf22152e27c4cf06a4f924cbb4d43ba84e4fcb36cc633352905b86df577fa22231366213aa04c039f3f8
SSDEEP 24576:kpiq5XrhXf2V+siXvFbKsFiLrn0RDw6jn:kYqXEAvwsFiLb+jn
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

782937

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

MulDiv HeapAlloc GlobalAlloc HeapCreate

user32

RemoveMenu SetParent DestroyIcon EnableMenuItem GetMenuState SetWindowRgn SendNotifyMessageA GetKeyState CreateDialogParamA LoadKeyboardLayoutA IsChild GetActiveWindow ToAscii OpenClipboard CallWindowProcW GetMessageTime IsWindowVisible GetScrollPos OffsetRect WindowFromPoint RegisterClipboardFormatA DrawTextW PostMessageA CloseClipboard ToUnicode GetAsyncKeyState IsWindow FillRect GetMenuCheckMarkDimensions LoadCursorA BeginDeferWindowPos DefFrameProcA GetMessageA DrawIcon ShowCursor MsgWaitForMultipleObjects CopyRect SubtractRect InvertRect PostQuitMessage SetWindowLongA mouse_event InsertMenuA InsertMenuItemA IsIconic GetCursorPos PostThreadMessageA GetCapture GetSysColor GetMenuItemID WinHelpA GetKeyboardLayoutList GetMenuItemCount OemToCharA DrawCaption ShowCaret UnregisterClassA RedrawWindow EmptyClipboard CharUpperBuffW GetKeyNameTextA MapVirtualKeyA DestroyWindow ModifyMenuA SetClassLongA CreateWindowExW GetLastActivePopup DrawTextA GetClassInfoW GetMessagePos GetForegroundWindow EnableScrollBar DefWindowProcA IsWindowEnabled GetCaretPos WaitForInputIdle FindWindowA GetClassInfoA SetTimer FlashWindow DeferWindowPos GetWindow CheckMenuItem EnumThreadWindows HideCaret SetForegroundWindow CreateIcon SetRect RegisterClassW PtInRect DrawTextExA ClientToScreen SetFocus IntersectRect GetSubMenu GetClipboardFormatNameA EnumWindows InvalidateRect SetMenuItemInfoA LoadBitmapA CharNextW IsClipboardFormatAvailable SetActiveWindow PeekMessageA GetWindowDC SetClipboardData DrawEdge CreateMenu GetIconInfo TabbedTextOutA GetClipboardData DefMDIChildProcA CreateWindowExA DialogBoxParamA DrawMenuBar TranslateMessage CallWindowProcA EnableWindow ShowWindow SystemParametersInfoA ReleaseDC ValidateRect SetKeyboardState RegisterWindowMessageA CallNextHookEx EqualRect UpdateWindow GetScrollInfo ShowScrollBar EndPaint IsZoomed EndDeferWindowPos DispatchMessageA DefWindowProcW GetTopWindow GetWindowTextLengthW DestroyCaret FrameRect GetKeyboardLayout GetPropA DeleteMenu BringWindowToTop IsCharAlphaA InvalidateRgn GetScrollRange SetWindowTextW MoveWindow SetMenu UnhookWindowsHookEx MessageBeep EndDialog SetWindowsHookExA ScreenToClient TranslateMDISysAccel GetSystemMetrics GetMenu GetWindowThreadProcessId EnumClipboardFormats WaitMessage AdjustWindowRectEx SetScrollPos LockWindowUpdate WindowFromDC IsDialogMessageA SetScrollRange GetFocus GetWindowRect GetWindowTextW GetWindowRgn KillTimer GetClientRect GetKeyboardState SetPropA ScrollDC ScrollWindowEx SetCaretPos GetWindowPlacement CharNextA GetDlgItem CreateCaret BeginPaint GetTabbedTextExtentA CharPrevW SetRectEmpty DrawFocusRect MapWindowPoints GetDoubleClickTime RemovePropA GetMenuItemRect GetDC GetMenuStringA SendMessageA GetDCEx MessageBoxA GetParent wsprintfA UnionRect IsRectEmpty CharLowerA GetSysColorBrush CopyImage DrawIconEx IsCharAlphaNumericA GetClassNameA ReleaseCapture SendMessageTimeoutA SetWindowPlacement SetWindowTextA GetSystemMenu CreatePopupMenu SetCursor IsWindowUnicode ShowOwnedPopups DrawTextExW LoadCursorFromFileA FindWindowExA TrackPopupMenu RegisterClassA InflateRect GetMenuItemInfoA SetWindowPos CharLowerBuffA ActivateKeyboardLayout SetWindowLongW DestroyCursor LoadIconA GetWindowLongA SendDlgItemMessageA SetCapture GetDesktopWindow GetUpdateRect SendMessageW DrawFrameControl GetCursor DestroyMenu SetScrollInfo CharUpperA ChildWindowFromPoint ScrollWindow GetWindowTextA CharUpperBuffA

gdi32

GetRandomRgn

comdlg32

GetSaveFileNameA ChooseFontA PrintDlgA GetOpenFileNameA ChooseColorA

advapi32

RegDeleteKeyA RegQueryValueA RegQueryValueExA RegCreateKeyExA RegEnumKeyExA RegOpenKeyA RegCloseKey RegQueryInfoKeyA RegSetValueExA RegEnumValueA RegFlushKey RegOpenKeyExA RegDeleteValueA GetUserNameA

shell32

SHGetMalloc SHGetDesktopFolder SHBrowseForFolderA SHGetPathFromIDListA

ole32

OleInitialize OleUninitialize

oleaut32

VarCmp OleLoadPicture

comctl32

ImageList_Draw ImageList_DragLeave ImageList_SetBkColor ord17 ImageList_GetIconSize ImageList_SetDragCursorImage ImageList_GetImageCount ImageList_Destroy ImageList_GetIcon ImageList_GetDragImage ImageList_SetIconSize ImageList_DragEnter ImageList_DrawEx ImageList_Write ImageList_DragShowNolock ImageList_Read ImageList_Add ImageList_LoadImageA ImageList_GetImageInfo ImageList_BeginDrag ImageList_Create ImageList_Remove ImageList_ReplaceIcon ImageList_Replace ImageList_EndDrag ImageList_DragMove ImageList_GetBkColor

winmm

timeGetTime timeEndPeriod mciSendCommandA timeBeginPeriod mciGetErrorStringA

msimg32

AlphaBlend

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

wsock32

ioctlsocket accept closesocket socket WSAAsyncSelect setsockopt getsockopt getsockname sendto bind inet_ntoa htons WSACleanup WSAStartup gethostbyname recvfrom select listen connect gethostname

mpr

WNetOpenEnumA WNetEnumResourceA WNetGetConnectionA WNetGetUniversalNameA WNetCloseEnum

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionFontA ImmSetCompositionWindow ImmGetCompositionStringW ImmGetCompositionStringA

ws2_32

WSAGetOverlappedResult WSARecv WSASocketA WSASend WSAAddressToStringA WSAStringToAddressA WSAEventSelect

secur32

QuerySecurityPackageInfoA

wldap32

ord17 ord16

Name

.text

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.xyue

Size

713KB

Virtual Size

712KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

6.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

57B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

340ce41fc44b9c9ec8f16b21f73ee79b79b75f7020710302a269696f52e14ece

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

msimg32

version

wsock32

mpr

imm32

ws2_32

secur32

wldap32

generic